CVE-2020-4406

CWE-1021 — Clickjacking3 documents3 sources
Severity
5.4MEDIUM
EPSS
0.1%
top 77.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
IBM Spectrum Protect ClientIBM Spectrum Protect FOR Space ManagementIBM Spectrum Protect Client (aix)+3 more
Timeline
PublishedJun 15
Latest updateMay 24

Description

IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the vict…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NExploitability: 2.3 | Impact: 2.7

Affected Packages6 packages

▶NVDibm/spectrum_protect_client8.1.7.0 — 8.1.9.1+1
▶CVEListV5ibm/spectrum_protect_client_(aix)8.1.9.0, 8.1.9.1+1

🔴Vulnerability Details

2
GHSA
GHSA-hfrq-mhmh-565m: IBM Spectrum Protect Client 8↗2022-05-24
▶
CVEList
CVE-2020-4406: IBM Spectrum Protect Client 8↗2020-06-15
▶
CVE-2020-4406 (MEDIUM CVSS 5.4) | IBM Spectrum Protect Client 8.1.7.0 | cvebase.io